WARRP

A native radare2 plugin for the WARP signature format.

Features

• Load WARP signature files (.warp)
• Create WARP signatures from analyzed binaries
• Match functions by GUID
• Apply matched function metadata (names, comments, types)
• Support for constraint-based disambiguation

Installation

Prerequisites

1. Rust toolchain (1.70+): https://rustup.rs/
2. radare2 (6.0+): https://github.com/radareorg/radare2

From r2pm (recommended)

r2pm -Uci warrp

From source

make install

Usage

Commands

Usage: zw  # Manage WARP signatures
zw                list loaded WARP containers
zw?               show this help
zw load <file>    load WARP signature file (.warp)
zw save <file>    save current signatures to WARP file
zw match [addr]   match function at address
zw match -a       match all functions in binary
zw create [addr]  create WARP signature for function
zw create -a      create signatures for all functions
zw test <binary>  test GUID generation against snapshot
zw info           show container/target info
zw clear          clear loaded containers

Note: WARP uses exact GUID matching which requires function boundaries to be known. When you run zw match or zw create, the plugin will automatically run minimal analysis (aa) if no functions are found in the binary. If you want deeper analysis beforehand, run aa or aaa manually.

Examples

# Load a WARP signature file
zw load /path/to/signatures.warp

# Match all functions in the binary
zw match -a

# Match function at current address
zw match

# Create signatures for all functions
zw create -a

# Save to a WARP file
zw save output.warp

WARP Format

WARP uses UUIDv5-based function identification:

1. Basic Block GUID: UUIDv5 of instruction bytes (with relocatable addresses masked)
2. Function GUID: UUIDv5 of concatenated basic block GUIDs (sorted by address)

Namespace UUIDs

• Basic Block: 0192a178-7a5f-7936-8653-3cbaa7d6afe7
• Function: 0192a179-61ac-7cef-88ed-012296e9492f
• Constraint: 019701f3-e89c-7afa-9181-371a5e98a576

Architecture

┌────────────────────────────────────────────────────────────────┐
│                   radare2 (libr_core.so)                       │
└─────────────────────────────┬──────────────────────────────────┘
                              │ FFI
┌─────────────────────────────▼──────────────────────────────────┐
│            core_warp.so (Rust native plugin)                   │
├────────────────────────────────────────────────────────────────┤
│            RCorePlugin → zw command handler                    │
├────────────────────────────────────────────────────────────────┤
│  GUID Generator  │  WARP Container  │  r2 Integration          │
│  (UUIDv5)        │  (File I/O)      │  (FFI bindings)          │
└────────────────────────────────────────────────────────────────┘

Roadmap

• Plugin registration
• Command handler (zw namespace)
• GUID generation (UUIDv5)
• WARP file loading (FlatBuffers)
• WARP file saving
• FlatBuffers I/O
• Function matching
• Metadata application (names, comments)
• Progress display (interactive mode)
• Constraint collection (adjacency + call sites)
• Constraint matching (disambiguation)
• Performance optimization (caching, batch fetch)
• Add network server support
• GUID snapshot testing

References

• WARP
• radare2
• Binary Ninja WARP Plugin